Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/qiYk5rXwCrVAihoZqVaJtAxvatQ.roa
File: qiYk5rXwCrVAihoZqVaJtAxvatQ.roa (raw, json)
Hash identifier: hFn5Yo1wyoAnbKanwDOpBe2bdSlLQVaTT4AU0VkH0xY=
Subject key identifier: AA:26:24:E6:B5:F0:0A:B5:40:8A:1A:19:A9:56:89:B4:0C:6F:6A:D4
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 1F549B44
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/qiYk5rXwCrVAihoZqVaJtAxvatQ.roa
Signing time: Sat 01 Jan 2022 05:55:19 +0000
ROA not before: Sat 01 Jan 2022 05:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12353
IP address blocks: 94.60.0.0/14 maxlen: 14
89.114.0.0/15 maxlen: 15
46.189.128.0/17 maxlen: 17
5.43.0.0/18 maxlen: 18
192.160.246.0/23 maxlen: 23
178.166.0.0/17 maxlen: 17
192.160.245.0/24 maxlen: 24
192.160.251.0/24 maxlen: 24
161.230.0.0/16 maxlen: 16
192.160.248.0/23 maxlen: 23
148.69.0.0/16 maxlen: 16
188.37.0.0/16 maxlen: 16
95.136.0.0/17 maxlen: 17
78.137.192.0/18 maxlen: 18
213.30.0.0/17 maxlen: 17
5.158.0.0/18 maxlen: 18
5.249.0.0/17 maxlen: 17
93.108.0.0/16 maxlen: 16
87.103.0.0/17 maxlen: 17
148.71.0.0/16 maxlen: 16
212.18.160.0/19 maxlen: 19
77.54.0.0/16 maxlen: 16
37.28.192.0/18 maxlen: 18
148.63.0.0/16 maxlen: 16
149.90.0.0/16 maxlen: 16
185.37.208.0/22 maxlen: 22
83.174.0.0/18 maxlen: 18
2001:818::/32 maxlen: 32
2001:818::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525638468 (0x1f549b44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Jan 1 05:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa2624e6b5f00ab5408a1a19a95689b40c6f6ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:8f:f7:fb:47:5c:4c:04:39:fa:bd:ca:1c:
7e:c8:93:a4:ae:49:db:c7:df:fa:f0:2d:57:29:81:
52:dd:4b:95:01:4a:f1:f0:74:72:e9:6a:e6:9a:38:
6f:4e:cf:b6:7d:57:eb:39:fe:59:51:71:ef:9b:bd:
06:df:7d:5f:f9:a6:ab:5c:b7:cb:2b:12:e2:18:2d:
e8:cd:49:1a:b6:e2:d3:d4:63:da:1a:9f:c6:6a:59:
7b:4a:be:89:f4:26:89:3c:29:ea:f8:7f:cb:bc:e2:
5c:0e:86:82:f6:22:8e:e6:a2:91:b1:80:f3:ff:8b:
c0:6d:30:1f:b3:ab:2d:ec:f4:f7:9e:52:2e:d5:8b:
6d:05:7a:40:64:c1:c9:84:f3:ff:95:79:a9:19:b4:
9d:5e:5e:93:4a:86:0a:1d:88:07:87:f5:f7:44:13:
bb:33:8a:09:8e:1d:89:ea:ee:9f:ae:0a:6c:ee:50:
d2:31:00:57:b0:22:2c:0f:e0:8e:6b:d1:81:83:d3:
5b:d2:5e:ea:04:65:1c:fe:56:51:9c:97:b4:fe:90:
e2:58:8f:a9:33:ee:c2:ac:8c:f8:5c:5b:d3:65:56:
1c:b6:ac:24:c9:2b:b2:3e:9b:77:4b:d7:9f:89:c1:
59:ca:21:54:24:c0:25:0e:25:23:34:f2:85:63:88:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:24:E6:B5:F0:0A:B5:40:8A:1A:19:A9:56:89:B4:0C:6F:6A:D4
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/qiYk5rXwCrVAihoZqVaJtAxvatQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.0.0/18
5.158.0.0/18
5.249.0.0/17
37.28.192.0/18
46.189.128.0/17
77.54.0.0/16
78.137.192.0/18
83.174.0.0/18
87.103.0.0/17
89.114.0.0/15
93.108.0.0/16
94.60.0.0/14
95.136.0.0/17
148.63.0.0/16
148.69.0.0/16
148.71.0.0/16
149.90.0.0/16
161.230.0.0/16
178.166.0.0/17
185.37.208.0/22
188.37.0.0/16
192.160.245.0-192.160.249.255
192.160.251.0/24
212.18.160.0/19
213.30.0.0/17
IPv6:
2001:818::/29
Signature Algorithm: sha256WithRSAEncryption
8c:1d:30:cd:b8:d0:b1:76:fd:bb:f6:b0:81:16:c5:b6:7b:81:
0a:04:53:12:16:57:05:0c:d5:fe:47:e1:fb:c7:21:d9:36:3f:
99:89:d4:ac:b7:de:1d:b0:5c:7a:34:95:f8:38:3b:bb:96:da:
cc:91:f2:8e:ff:ff:be:99:da:90:54:af:b7:60:ea:58:c2:c9:
53:75:1d:b1:0d:7b:92:39:ba:1a:d2:7e:78:5a:85:23:81:3a:
d0:27:fd:54:38:60:88:01:d2:d1:1c:23:ee:aa:36:7a:23:c3:
67:91:b7:46:2c:e9:b7:f6:4b:50:be:56:3a:fc:f0:0c:3e:2e:
8d:0b:2d:93:15:44:92:c7:4d:c1:b6:3c:b8:1e:82:65:27:9f:
c0:a6:e5:20:36:8c:42:a5:f5:cd:27:ba:82:7d:5d:c6:89:7a:
0e:02:aa:3e:cd:55:9a:5d:ff:7b:b0:d7:26:d8:cf:56:9e:15:
48:27:2a:39:ff:8c:c6:e3:4c:a3:ea:49:4e:0d:c2:25:67:ab:
ef:b6:9e:bd:46:09:07:ce:c9:db:bb:cf:3c:3e:15:fe:1b:f1:
55:97:8d:d0:bc:3c:de:b6:73:14:0e:a7:dc:c9:06:5d:0f:76:
b8:62:3b:e2:5b:11:32:2c:df:c3:01:3e:12:c0:8e:6f:b7:de:
f7:b8:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:48 2025 by rpki-client